CIO-OFFICE LLP
Cyber Security Assessment
CIO-OFFICE undertakes cyber security assessments to a range of industry standard frameworks. We assess both security maturity and security posture. We can also undertake full intelligence led cyber threat assessments to assess current exposure, threat faced and an organisation’s ability to defend against it.
Features
- NIST Cyber Security Framework (CSF) for cyber assessments
- NIST CSF results are consumable by technical and non-technical stakeholders
- NIST CSF 800-53, ISO 27001, CIS, C2M2, CMMC, GovS 007
- Our Cyber Threat Intelligence (CTI) generates threat assessment data
- CTI produces Most Likely & Most Dangerous MITRE ATT@CK scenarios
- Assessments include recommendations and target posture levels
- Comparing MITRE scenarios to as-is assessment determines cyber defence capability
Benefits
- Independent oversight and validation of cyber as-is posture
- Understand if your posture is ‘good enough’ against likely attacks
- Gauge your defensible position with stakeholders and regulators
- Provides a view on ROI of Cyber Security spend
- Updates cyber security key metrics and performance indicators
- CTI element allows risk decisions to incorporate threat and vulnerability
- Mapping to GovS 007 Security standard
- Cyber security assessment against a repeatable industry standard framework
Pricing
£500 to £1,350 a person a day
- Education pricing available
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at roy.irvine@cio-office.com.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 14
Service ID
3 7 9 4 2 2 1 0 2 4 0 3 3 9 1
Contact
CIO-OFFICE LLP
Roy Irvine
Telephone: 07833207816
Email: roy.irvine@cio-office.com
Planning
- Planning service
- Yes
- How the planning service works
- CIO-OFFICE are an independent consultancy and we support our clients as needed to help them determine which service is best fit for their requirements. Please contact us for further discussion.
- Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
- CIO-OFFICE are an independent consultancy and we support our clients training requirements as needed to help them determine which service is best fit for their requirements. Please contact us for further discussion.
- Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- We offer independent support to our clients across all offerings.
- Setup or migration service is for specific cloud services
- No
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- We offer independent support to our clients across all offerings.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security incident management
- Security audit services
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Buyer hosting or software
- Hosting or software provided by your organisation
- Hosting or software provided by a third-party organisation
- How the support service works
- We offer independent support to our clients across all offerings.
Service scope
- Service constraints
- No. All our services can be provided on a remote basis if required.
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- We offer customised solutions based on our clients SLA requirements.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
- We offer customised solutions based on our clients SLA requirements.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
CIO-OFFICE is a low carbon business. We take our commitments to fighting climate change seriously and for any engagements through this contract we will reduce business travel carbon emissions and continue to promote collaborative technologies and allow people to work together without needing to travel. Specific action we would take to support a client with this theme would depend on the scale and scope of the engagement, and the Social Value Model Award Criteria deemed relevant to the contract.Covid-19 recovery
CIO-OFFICE is committed to supporting the recovery from Covid-19. We offer upskilling for our people in the new ways of working and making our spaces Covid-secure to allow for safe working. We also provide experienced resources to the government to deliver new programmes at short notice, enabling the country to respond to and recover from the pandemic swiftly. Specific action we would take to support a client with this theme would depend on the scale and scope of the engagement, and the Social Value Model Award Criteria deemed relevant to the contract.Tackling economic inequality
CIO-OFFICE commitment to having a positive impact on society is a long-lasting one. We understand that we have a responsibility to our communities, both those we work in and beyond to help reduce inequality, raise aspirations and promote social and digital inclusion. Specific action we would take to support a client with this theme would depend on the scale and scope of the engagement, and the Social Value Model Award Criteria deemed relevant to the contract.Equal opportunity
CIO-OFFICE beliefs and principles are at the heart of everything we do, ensuring our approach and delivery supports the basis that all human beings are born free and equal in dignity and rights. We are committed to ensure all our business practices are conducted in an honest, transparent, inclusive and ethical manner. This includes, but is not limited to, our commitment to recruiting, developing and retaining the most talented people regardless of background. Specific action we would take to support a client with this theme would depend on the scale and scope of the engagement, and the Social Value Model Award Criteria deemed relevant to the contract.Wellbeing
We pride ourselves on promoting wellbeing for our people, and as part of our engagement with clients we always recognise the importance of health and wellbeing in enabling the team to be at their best and focus on the most impactful areas. We also provide a subscription to the ‘Headspace’ app for all staff, which provides mental health support and exercises. Specific action we would take to support a client with this theme would depend on the scale and scope of the engagement, and the Social Value Model Award Criteria deemed relevant to the contract.
Pricing
- Price
- £500 to £1,350 a person a day
- Discount for educational organisations
- Yes
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at roy.irvine@cio-office.com.
Tell them what format you need. It will help if you say what assistive technology you use.